This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft File: CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json) Hash identifier: 9/SftMg5oLsmxG5QuGxrGFkpsPwpPjfVmHSVCPPe240= Subject key identifier: 7F:2C:DE:7D:F1:2C:CA:71:98:EC:64:B9:6C:62:30:55:5E:F4:97:A0 Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 Certificate issuer: /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Certificate serial: 0277 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft Manifest number: 026C Signing time: Sun 25 Jan 2026 00:55:55 +0000 Manifest this update: Sun 25 Jan 2026 00:55:54 +0000 Manifest next update: Sun 01 Feb 2026 00:55:54 +0000 Files and hashes: 1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: Z7T+/DtBEUYYr/3zvyY1oiDSIzOOs1EvuDyvyzPXGXA=) 2: F7D11060619811ED9437B344C4F9AE02.roa (hash: qAnnelNEaBIcl+tlBGt8/4Pa4w6K1hQge4BvLhS2BHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 631 (0x277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124679, serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Validity Not Before: Jan 25 00:55:54 2026 GMT Not After : Feb 1 00:55:54 2026 GMT Subject: CN=69756a1b-a554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:85:ea:92:d4:11:e9:e9:d7:ea:e9:5e:17: 0b:73:f6:ef:fe:17:76:af:22:84:7a:b8:e3:09:9e: 6e:30:22:b0:0b:8c:53:81:64:74:e7:52:fc:b2:8d: c6:19:60:98:90:0a:f6:4d:ab:25:b7:f9:8e:0e:cc: 7a:52:89:f9:95:c1:76:81:06:55:c0:33:84:e4:35: a8:d9:45:4a:a9:6e:ff:25:bc:b1:7b:01:0f:de:c8: 12:b8:94:7d:0b:2b:c0:89:94:38:8a:5e:78:88:23: 55:5d:07:85:2a:c7:1d:eb:ab:44:d6:16:9a:ea:f8: 79:61:15:ce:e6:91:03:82:49:99:7c:64:df:4b:21: 32:c6:4f:54:04:8b:17:49:e1:b6:a4:a9:42:3f:2e: c3:28:8c:41:11:28:00:ad:21:24:79:b3:b4:ab:75: 61:8b:32:ac:78:43:2a:bc:d0:59:f4:2e:d1:bc:f3: 08:36:a2:fa:95:15:24:03:ce:b8:8a:b5:ca:de:b4: 3c:d8:c1:d6:88:eb:ed:70:6e:73:7b:68:9f:58:74: 3d:3a:a2:a8:38:ce:6c:9b:5b:49:c9:e0:a9:b2:d6: 74:c7:45:3f:4f:73:9c:e7:a5:df:d9:f7:89:b2:61: 07:9e:cd:27:33:94:01:7a:f3:ff:97:f4:36:8a:03: 39:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2C:DE:7D:F1:2C:CA:71:98:EC:64:B9:6C:62:30:55:5E:F4:97:A0 X509v3 Authority Key Identifier: keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:e8:1f:5a:0d:93:d5:f2:99:23:7c:19:d8:12:07:c4:0e:28: d0:c8:7d:e3:56:5c:5f:8c:dc:3e:7a:a4:6f:c6:07:bd:fe:ae: 71:2f:71:49:54:39:fc:72:b8:0a:d5:d5:49:21:bd:3e:96:e2: 5e:b3:ec:b7:33:30:2b:44:5d:e1:6a:d8:0b:da:a5:46:9b:7b: d3:c2:00:df:c8:c9:6e:3e:71:1a:78:bb:5c:17:2f:a3:f6:b4: 0d:86:87:be:f6:ae:07:3c:bd:73:a4:42:65:fd:5a:d6:85:28: 97:68:17:56:c1:9b:b7:28:26:29:cb:98:9c:9a:a1:54:f1:df: 92:e8:19:cc:52:b7:9b:b4:7d:94:5d:ab:b2:ea:db:bc:7d:19: 0d:ab:96:bf:ad:bf:57:a4:ed:22:04:b2:ad:a7:2f:f8:00:89: 03:bd:5d:83:bd:8b:66:7f:b2:9e:59:db:de:8f:6d:22:aa:70: 9f:ec:3d:26:6f:b3:bf:34:49:58:ae:e1:d0:1c:85:b5:93:27: 6b:f7:63:e1:ef:35:d8:bd:a7:ec:88:b3:e7:f3:28:d8:06:a3: b8:de:db:9a:2c:39:08:71:27:e7:c5:fb:78:ff:47:c4:00:6e: 2e:ed:a6:b4:94:0b:61:c5:fb:89:23:79:e3:8a:7a:a3:d2:e0: fc:28:29:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ2NzkxMTAvBgNVBAUTKDBBNDgwNTE3NzQxMDc2RkU3NjNFNEU5RTMyRjM1QkQ0 NTk4OTMyOTIwHhcNMjYwMTI1MDA1NTU0WhcNMjYwMjAxMDA1NTU0WjAYMRYwFAYD VQQDDA02OTc1NmExYi1hNTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtD6F6pLUEenp1+rpXhcLc/bv/hd2ryKEerjjCZ5uMCKwC4xTgWR051L8so3G GWCYkAr2Taslt/mODsx6Uon5lcF2gQZVwDOE5DWo2UVKqW7/JbyxewEP3sgSuJR9 CyvAiZQ4il54iCNVXQeFKscd66tE1haa6vh5YRXO5pEDgkmZfGTfSyEyxk9UBIsX SeG2pKlCPy7DKIxBESgArSEkebO0q3VhizKseEMqvNBZ9C7RvPMINqL6lRUkA864 irXK3rQ82MHWiOvtcG5ze2ifWHQ9OqKoOM5sm1tJyeCpstZ0x0U/T3Oc56Xf2feJ smEHns0nM5QBevP/l/Q2igM5IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8s3n3x LMpxmOxkuWxiMFVe9JegMB8GA1UdIwQYMBaAFApIBRd0EHb+dj5OnjLzW9RZiTKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDY3OS9GNUI3OEE4ODYx OTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2NTJQazZlTXZOYjFGbUpN cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrZ0ZGM1FRZHY1MlBrNmVNdk5iMUZtSk1wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDY3OS9GNUI3OEE4ODYxOTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2 NTJQazZlTXZOYjFGbUpNcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC66B9aDZPV8pkjfBnYEgfEDijQyH3jVlxfjNw+eqRvxge9/q5xL3FJ VDn8crgK1dVJIb0+luJes+y3MzArRF3hatgL2qVGm3vTwgDfyMluPnEaeLtcFy+j 9rQNhoe+9q4HPL1zpEJl/VrWhSiXaBdWwZu3KCYpy5icmqFU8d+S6BnMUrebtH2U Xauy6tu8fRkNq5a/rb9XpO0iBLKtpy/4AIkDvV2DvYtmf7KeWdvej20iqnCf7D0m b7O/NElYruHQHIW1kydr92Ph7zXYvafsiLPn8yjYBqO43tuaLDkIcSfnxft4/0fE AG4u7aa0lAthxfuJI3njinqj0uD8KCk7 -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:48 2026 by rpki-client